[SECURITY] [DSA 3382-1] phpmyadmin security update

🗓️ 28 Oct 2015 19:52:25Reported by DebianType

phpMyAdmin security update for CVE-2014-8958, CVE-2014-9218, CVE-2015-2206, CVE-2015-3902, CVE-2015-3903, CVE-2015-6830, CVE-2015-787

Reporter	Title	Published	Views	Family All 246
FreeBSD	phpMyAdmin -- Content spoofing vulnerability	23 Oct 201500:00	–	freebsd
FreeBSD	phpMyAdmin -- reCaptcha bypass	8 Sep 201500:00	–	freebsd
FreeBSD	phpMyAdmin -- Risk of BREACH attack due to reflected parameter	4 Mar 201500:00	–	freebsd
FreeBSD	phpMyAdmin -- XSS and information disclosure vulnerabilities	20 Nov 201400:00	–	freebsd
FreeBSD	phpMyAdmin -- XSS and DoS vulnerabilities	3 Dec 201400:00	–	freebsd
zdt	phpMyAdmin 4.0.x, 4.1.x, 4.2.x - DoS	16 Dec 201400:00	–	zdt
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.6 / 4.1.x < 4.1.14.7 / 4.2.x < 4.2.12 Multiple Vulnerabilities (PMASA-2014-13 through 16)	24 Nov 201400:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.7 / 4.1.x < 4.1.14.8 / 4.2.x < 4.2.13.1 DoS (PMASA-2014-17)	8 Dec 201400:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.9 / 4.2.x < 4.2.13.2 / 4.3.x < 4.3.11.1 Information Disclosure Vulnerability (PMASA-2015-1)	25 Feb 201600:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.10 / 4.2.x < 4.2.13.3 / 4.3.x < 4.3.13.1 / 4.4.x < 4.4.6.1 Multiple Vulnerabilities (PMASA-2015-2, PMASA-2015-3)	25 Feb 201600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	7	all	phpmyadmin	4:3.4.11.1-2+deb7u2	phpmyadmin_4:3.4.11.1-2+deb7u2_all.deb
Debian	8	all	phpmyadmin	4:4.2.12-2+deb8u1	phpmyadmin_4:4.2.12-2+deb8u1_all.deb

28 Oct 2015 19:52Current

9.6Critical risk

Vulners AI Score9.6

CVSS 26.8

EPSS0.1073